Login Request a demo
WP
Product
Wpbookit
by Iqonic · last CVE Jul 12, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 6High 1Medium 2Low 0
Severity
All severities9Critical6High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wpbookit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6058
9.8
6%
Jul 12
WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload
Affected: before 1.0.5
CVE-2025-3811
9.8
1%
May 9
WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update
Affected: before 1.0.3
CVE-2025-3810
9.8
1%
May 9
WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover
Affected: before 1.0.3
CVE-2025-0357
9.8
1%
Jan 25
WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload
Affected: before 1.6.10
CVE-2024-10215
9.8
1%
Jan 9
WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change
Affected: before 1.6.6
CVE-2024-54280
9.8
1%
Dec 16
WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability
Affected: through 1.6.0
CVE-2025-6057
8.8
1%
Jul 12
WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
Affected: before 1.0.5
CVE-2025-26910
6.1
0%
Mar 10
WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability
Affected: before 1.0.2
CVE-2025-32254
5.3
0%
Apr 4
WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability
Affected: through 1.0.3
Showing 9